The Cyberwarfare Academy
Section 01 — The historical moment
From cyber defense to authorized cyber disruption
One malicious actor with modern AI can impersonate hundreds of identities, automate fraud, manipulate victims across languages and run a criminal network at machine speed. Cyber Hunters use AI to fight back — inside the law, under authorization, with evidence that survives scrutiny.
2024–2025
01
Private threat intelligence matures
Platform, bank and vendor telemetry becomes an investigative asset in its own right.
2025–2026
02
Generative AI increases scam scale
One actor can manufacture identities and localize fraud across dozens of languages.
2026
03
Agentic AI arms both sides
Autonomous agents accelerate defenders and criminal operations alike.
AUG 2026
04
New U.S. framework
A federal framework for vetted private-sector cyber capabilities against certain foreign cyber-enabled criminal organizations — under government direction, DOJ/DHS oversight, contractual authorization, legal review, written approval, deconfliction, minimization and stop conditions.
SEP 2026
05
U.S.–U.K. scam-center alliance
Coordinated work across prosecutors, law enforcement, banks, crypto infrastructure, platforms, telecoms and NGOs.
NEXT
06
A new workforce must be trained
That workforce is the reason this Academy exists.
Why now — the authorization chain
- Private intelligence→
- Government review→
- Target validation→
- Legal authorization→
- Deconfliction→
- Authorized operation→
- Assessment
This is not a general license for private citizens to hack criminals. Authorized disruption happens under government direction with oversight, vetting, contractual authorization, legal review, written approval, interagency deconfliction, minimization, stop conditions, target standards, reporting and evaluation.
The old posture
- Monitor
- Patch
- Detect
- Respond
The hunter posture
- Discover
- Understand
- Attribute
- Connect
- Document
- Escalate
- Disrupt
Section 02 — Nine months, three terms
TERM I
Becoming the Hunter
Months 1–3
Learn to see a criminal ecosystem, think like an analyst, and treat every clue as something you will one day have to defend.
8 modules
TERM II
AI Against AI
Months 4–6
The contest becomes human + AI versus malicious human + AI. Learn both sides of the machine.
10 modules
TERM III
The Disruption Lab
Months 7–9
Convert fragmented clues into a defensible package an authorized institution can act upon.
12 modules
Section 03 — The HUNTERS loop
H
Hypothesize
Define what may be happening and the competing explanations.
U
Uncover
Lawfully discover signals, identities, relationships and anomalies.
N
Network
Connect people, accounts, companies, devices, wallets, domains and events.
T
Test
Try to disprove the preferred theory and expose confirmation bias.
E
Evidence
Preserve provenance, confidence, timestamps and chain of custody.
R
Refer
Package intelligence for the platform, bank, law enforcement or authorized operator.
S
Safeguard
Reduce harm and support legally authorized disruption and prevention.
Section 04 — The teaser
A username. A wallet. A screenshot. A voice. A lie.
Could you find the person behind them?
Begin your first huntSection 05 — Core doctrine
- 01VERIFY BEFORE YOU ATTRIBUTE.
- 02A CLUE IS NOT EVIDENCE UNTIL YOU CAN DEFEND IT.
- 03AI MAY ACCELERATE ANALYSIS. IT DOES NOT REPLACE JUDGMENT.
- 04THE INTERNET REMEMBERS. INVESTIGATORS MUST TOO.
- 05FOLLOW THE NETWORK, NOT JUST THE PERSON.
- 06FOLLOW THE MONEY.
- 07UNDERSTAND THE HUMAN.
- 08KNOW YOUR AUTHORITY.
- 09WHEN IN DOUBT, PRESERVE.
- 10THE BEST HUNTERS TRY TO PROVE THEMSELVES WRONG.